@biomejs/cli-linux-x64-musl

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention the package, making the relationship less explicit. The organization-owned monorepo context partly explains the mismatch but does not fully remove the transparency gap.

Repo toolingcaution

The project uses a build tool but no security-scanning tools were detected. The missing scanning tooling is a modest transparency gap, not evidence of abandonment.

Security policycaution

No repository security policy was found. This makes vulnerability reporting and response expectations less transparent for dependents.

Workflow auditcaution

All 25 workflows were analyzed and all 236 action references are pinned, with no untrusted checkout or script-injection findings. However, several high-confidence unpinned-tool findings and an informational trusted-publishing finding remain; the low-confidence cache findings are hygiene concerns only.